Extracted

• • Target

    ebc25d1665e149526a6a379f033e8b6aa5e1c5bab0ff04968d3a2d93faab6b7f.exe

  • Size

    96KB

  • MD5

    028c525ddc56e9c6ba2909ab907c4648

  • SHA1

    00b680e1a05dc6a5f79c7f827d92a0e718bd23e7

  • SHA256

    ebc25d1665e149526a6a379f033e8b6aa5e1c5bab0ff04968d3a2d93faab6b7f

  • SHA512

    50b7dfad1d6994009b3554a66f737e9a409ed25f634b59c07c32b0eb0a3f9ac531503ecc6dac2141f865f2a35f3c7761a1c729253761cfe3edd6c47350718254

  • SSDEEP

    1536:E/f7XvNb/M1lmu+fb2Lux7RZObZUUWaegPYA2:EbFzM1lmTgGClUUWaeV

  Score

  10^/10

  berbewbruteratelbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Brute Ratel C4

    A customized command and control framework for red teaming and adversary simulation.

    backdoorbruteratel

  • Bruteratel family

    bruteratel

  • Detect BruteRatel badger

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2